Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
File:                     1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json)
Hash identifier:          dwSgZiq3cXKFRJnVUBgz3kgkOIf0r+zPPucVVY5FSEA=
Subject key identifier:   A5:7F:2D:CC:FE:9E:45:B4:4F:04:84:77:47:56:88:DC:2A:C7:47:2F
Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
Certificate issuer:       /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Certificate serial:       6425782A6AEA7746D5B8D3D04D895B13B1D12621
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
Manifest number:          F9
Signing time:             Fri 24 Jul 2026 17:36:46 +0000
Manifest this update:     Fri 24 Jul 2026 17:31:46 +0000
Manifest next update:     Sat 25 Jul 2026 19:34:46 +0000
Files and hashes:         1: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=)
                          2: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=)
                          3: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=)
                          4: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=)
                          5: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=)
                          6: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: b4J7Id5uZtr6eVn3SThCRnczVBJOk+aMufaw6rDsd50=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:25:78:2a:6a:ea:77:46:d5:b8:d3:d0:4d:89:5b:13:b1:d1:26:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
        Validity
            Not Before: Jul 24 17:31:46 2026 GMT
            Not After : Jul 25 19:34:46 2026 GMT
        Subject: CN=A57F2DCCFE9E45B44F048477475688DC2AC7472F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:9b:c7:93:c7:40:48:87:18:d7:4e:e9:11:
                    d8:4d:83:9d:3e:d0:cf:40:35:da:ae:3c:0d:68:83:
                    03:78:72:ed:a6:d8:26:6f:d8:bf:ef:2b:1d:9d:71:
                    14:24:52:77:ab:78:d1:34:a7:3e:b4:88:59:36:58:
                    b9:d9:4d:63:eb:f3:be:0f:83:59:92:7f:86:a8:aa:
                    20:5a:3f:d2:b3:03:18:e0:0b:ed:bb:dc:40:b7:f3:
                    f3:ac:3b:3f:40:b5:81:c4:48:0e:27:30:8a:96:da:
                    d0:8d:a8:a9:ed:05:59:3c:34:3d:10:22:19:dd:91:
                    50:ce:7d:7f:50:ec:da:ef:fd:57:58:18:d6:ce:a2:
                    50:95:0c:69:49:bd:ea:5f:d0:f8:e6:ee:f6:8a:1d:
                    01:90:d5:7a:2f:97:53:bc:48:56:fc:4b:ef:04:f6:
                    10:15:c0:4f:f2:e4:dc:1f:72:88:63:23:eb:5f:cd:
                    80:26:f7:4d:b3:f8:03:cf:d8:e7:94:c7:b6:e9:4f:
                    47:8f:fd:64:95:73:00:43:31:1f:b1:b9:db:78:ba:
                    f4:eb:86:70:90:d2:d7:2e:cb:88:6f:9f:ee:b1:d1:
                    79:54:ef:f9:5e:ce:4e:e3:ca:92:fc:7b:76:60:11:
                    ea:21:6c:5a:94:98:4b:0c:85:1c:6b:0b:09:c9:c6:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:2D:CC:FE:9E:45:B4:4F:04:84:77:47:56:88:DC:2A:C7:47:2F
            X509v3 Authority Key Identifier:
                keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7a:3d:f7:1d:83:49:4d:d6:bb:3d:45:19:da:f9:a8:21:22:
         1d:b8:9f:31:7b:7d:ad:05:c3:f1:cc:c5:fd:49:55:f6:c0:b3:
         93:73:10:2f:e4:33:91:a1:68:cf:e1:25:33:f7:ad:5d:59:f3:
         2f:cc:7c:1d:d7:49:3d:cf:17:c7:9a:3a:c4:c2:a0:65:09:38:
         c6:57:5e:db:0e:a8:78:ad:42:2d:df:21:a5:ae:04:52:b1:00:
         f4:17:af:61:13:ab:00:5b:d7:a1:39:21:04:09:ed:30:04:b4:
         b1:18:b1:83:48:e7:37:24:d5:e2:e7:88:9e:34:cc:23:40:b3:
         09:d7:7b:75:08:80:1e:1c:08:ec:85:04:e6:5e:8b:29:1f:45:
         17:0a:c1:93:4e:f7:22:9d:35:92:6c:e9:e9:c2:a5:68:fd:28:
         d4:55:55:e1:a0:d9:b6:df:79:98:1a:88:56:b5:f8:c0:f4:11:
         55:71:0d:76:2d:03:48:fd:7c:22:94:36:f0:c1:3c:3f:82:2f:
         b7:65:f6:6e:09:f9:c0:ce:df:63:f3:ac:a3:80:8a:b8:1e:eb:
         be:83:ac:c0:93:8e:7c:e3:93:1a:45:0c:10:9f:ea:c7:3f:5b:
         c5:99:68:c1:40:18:36:55:cc:f6:8a:93:c8:12:4a:45:40:df:
         44:60:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:09:01 2026 by rpki-client